Certificate
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer
File: 197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.cer (raw, json)
Hash identifier: M6dL8dp+A6SHld9ZtB7J8R4cmzBKbioWnhJu3FaEZ6Y=
Subject key identifier: 19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial: 11DC0A1E5CB20DCF7E8E8442A556722285EBA70E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest: rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft
caRepository: rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/
Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before: Fri 27 Sep 2024 21:37:58 +0000
Certificate not after: Fri 26 Sep 2025 21:42:58 +0000
Subordinate resources: AS: 265306
IP: 168.121.28.0/22
IP: 2804:2dd4::/32
Validation: Failed, certificate revoked on Sun 03 Nov 2024 01:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dc:0a:1e:5c:b2:0d:cf:7e:8e:84:42:a5:56:72:22:85:eb:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Validity
Not Before: Sep 27 21:37:58 2024 GMT
Not After : Sep 26 21:42:58 2025 GMT
Subject: CN=197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:7a:b5:a6:56:f3:7a:73:a1:bf:2c:d9:02:
d9:14:fc:97:f1:bf:95:19:35:0a:78:7b:a7:b4:3a:
2f:c8:ac:33:c9:27:00:eb:87:1b:eb:3f:3c:be:52:
3b:d3:2f:1e:10:13:d6:d6:9d:9c:0b:cc:7b:8e:a1:
16:78:58:45:0d:63:f3:07:29:5d:7d:41:ad:f1:6b:
3e:64:0b:4e:13:5e:42:e2:f5:f1:9b:e9:16:4e:10:
d2:72:96:d0:91:ce:16:5c:54:44:38:78:71:c8:0a:
07:ca:e7:00:e4:74:e2:3d:9d:b3:85:c3:a6:aa:d6:
08:ae:03:84:3e:7e:48:67:66:ae:8f:66:f0:6e:15:
d1:22:ca:72:7f:24:07:f5:df:7e:1a:eb:e8:d5:14:
e5:23:2f:4c:a3:1f:f5:96:1a:5d:58:91:86:05:3f:
e0:3c:2d:b1:91:ca:3b:46:53:25:02:14:0c:4d:ce:
5e:51:43:04:d6:d1:30:99:cc:18:29:5b:57:a7:18:
9a:a1:d1:59:82:d2:12:58:68:77:88:ee:a5:89:5a:
4f:29:01:4a:38:ac:25:38:12:8e:5e:ad:3d:b7:16:
16:97:b3:45:83:43:69:b3:e6:73:21:03:64:86:d2:
6e:a1:db:0e:5e:49:7f:23:90:0d:52:be:2b:ec:59:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
19:7B:E1:FE:7B:FF:56:11:CC:4F:71:29:CE:2D:A3:B3:84:8C:3C:BE
X509v3 Authority Key Identifier:
keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1
RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/1/197BE1FE7BFF5611CC4F7129CE2DA3B3848C3CBE.mft
RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.28.0/22
IPv6:
2804:2dd4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265306
Signature Algorithm: sha256WithRSAEncryption
31:76:ce:11:1d:2c:8a:cd:79:d3:e3:a0:52:4a:52:75:d7:7a:
1a:b3:6a:b1:9e:72:7a:15:53:0f:c2:ca:4e:41:8d:28:cd:42:
33:60:e3:05:11:27:0b:8f:a5:b6:4d:e4:dc:96:4d:84:0b:51:
00:cc:63:7a:54:fd:c6:3f:29:38:d3:10:94:90:dc:9f:f3:d9:
e5:a3:25:89:75:6b:f4:d5:7f:2f:c1:f9:4f:d1:41:e0:08:34:
73:fa:40:79:f5:ed:f5:d3:09:ab:51:30:35:33:8c:e3:31:73:
88:a4:7e:cd:6e:0e:7e:ee:d1:6d:b5:33:6c:49:cb:09:f1:dc:
df:f6:52:97:66:32:1d:66:10:00:90:7b:cf:1b:9f:8a:e1:86:
06:50:a8:73:2e:7c:55:ed:7e:16:a1:02:d5:45:ea:a7:9d:ce:
19:7f:73:cc:6c:83:3f:3d:94:f5:9b:32:09:56:3f:d4:ab:eb:
43:a0:14:6c:5d:cc:86:70:da:ef:c7:b5:2b:2f:96:52:d6:69:
b9:cd:63:c0:e6:a0:99:5c:d7:4c:83:26:6d:6f:80:9c:20:53:
82:5a:9e:97:be:44:94:66:ed:b5:23:62:8f:10:76:d0:26:ac:
50:14:63:74:3b:8a:10:59:8d:63:d3:34:ee:94:67:f6:10:83:
7a:34:6c:ef
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUEdwKHlyyDc9+joRCpVZyIoXrpw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MjcyMTM3NThaFw0yNTA5MjYyMTQyNThaMDMxMTAvBgNV
BAMTKDE5N0JFMUZFN0JGRjU2MTFDQzRGNzEyOUNFMkRBM0IzODQ4QzNDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpHq1plbzenOhvyzZAtkU/Jfx
v5UZNQp4e6e0Oi/IrDPJJwDrhxvrPzy+UjvTLx4QE9bWnZwLzHuOoRZ4WEUNY/MH
KV19Qa3xaz5kC04TXkLi9fGb6RZOENJyltCRzhZcVEQ4eHHICgfK5wDkdOI9nbOF
w6aq1giuA4Q+fkhnZq6PZvBuFdEiynJ/JAf1334a6+jVFOUjL0yjH/WWGl1YkYYF
P+A8LbGRyjtGUyUCFAxNzl5RQwTW0TCZzBgpW1enGJqh0VmC0hJYaHeI7qWJWk8p
AUo4rCU4Eo5erT23FhaXs0WDQ2mz5nMhA2SG0m6h2w5eSX8jkA1SvivsWZULAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZe+H+e/9WEcxP
cSnOLaOzhIw8vjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmFw
aEtQMVpzNlJwWWRHYWhNcmRjS2VTaXF2Y3poN01zVVdmQlJnNnc4MzIvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmFw
aEtQMVpzNlJwWWRHYWhNcmRjS2VTaXF2Y3poN01zVVdmQlJnNnc4MzIvMS8xOTdC
RTFGRTdCRkY1NjExQ0M0RjcxMjlDRTJEQTNCMzg0OEMzQ0JFLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKoeRwwDQQCAAIwBwMFACgELdQwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBAxaMA0GCSqGSIb3DQEBCwUAA4IBAQAxds4RHSyKzXnT46BS
SlJ113oas2qxnnJ6FVMPwspOQY0ozUIzYOMFEScLj6W2TeTclk2EC1EAzGN6VP3G
Pyk40xCUkNyf89nloyWJdWv01X8vwflP0UHgCDRz+kB59e310wmrUTA1M4zjMXOI
pH7Nbg5+7tFttTNsScsJ8dzf9lKXZjIdZhAAkHvPG5+K4YYGUKhzLnxV7X4WoQLV
Reqnnc4Zf3PMbIM/PZT1mzIJVj/Uq+tDoBRsXcyGcNrvx7UrL5ZS1mm5zWPA5qCZ
XNdMgyZtb4CcIFOCWp6XvkSUZu21I2KPEHbQJqxQFGN0O4oQWY1j0zTulGf2EIN6
NGzv
-----END CERTIFICATE-----
Generated at Sun Nov 3 05:34:10 2024 by rpki-client on console-ams.rpki-client.org